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Description 



Method for operating a terminal device in a radio communication 
system, a radio communication system, a terminal device and a 

f 5 confirmation unit for a radio communication system 

I 

J The invention relates to a method for operating a terminal device in 

a radio communication system, a radio communication system, a 

terminal device and a confirmation unit for a radio communication 
10 system. 



In radio communication systems, data transmission from radio 
stations takes place by way of an air interface. Known radio 
communication systems are for example wireless local networks (WLAN, 

15 Wireless Local Area Network) and also mobile radio systems, for 

which numerous standards are known. In Europe, first and foremost 
GSM is known as the standard for the second generation of mobile 
radio and UMTS as the standard for the third generation of mobile 
radio. The concept of so-called reconf igurable terminal devices is 

20 known in particular in mobile radio systems. These are reconfigured 
by means of software downloads executed by way of their air 
interface. Updating of their operating system can take place by this 
means, as a result of which for example even a deployment in mobile 
radio systems is possible, of which the terminal device was not 

25 capable prior to the reconfiguration. Since errors can occur during 
the aforementioned reconfiguration of the terminal devices, errors 
which affect the operation of the terminal device in such a way as 
to have a detrimental effect on the overall operation of the radio 
communication system (by signals being transmitted by an incorrectly 

3 0 reconfigured terminal device in power ranges which are not normally 
permitted or using formats which are not normally permitted, for 
example) , a method is known whereby a check is performed during 
operation of such terminal devices on the signals transmitted by 
them. In this manner it is possible to recognize whether the signals 

35 correspond to normal operating conditions. Should this not be the 
case, the terminal device can be recognized as being defective on 
account of the errors detected and removed from the radio system. 
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The method just described has the consequence that negative 
influences of an incorrectly configured terminal device on the 
communication system in which it is being operated are only avoided 
if the check performed on its signals or its functional integrity 
5 while it is operating has produced a corresponding negative result. 

r 

The object of the invention is to reduce the probability of a radio 
communication system being influenced by incorrectly functioning 
terminal devices. 

10 

This object is achieved by a method according to claim 1, a radio 
communication system according to claim 11, a terminal device 
according to claim 12 and also a confirmation unit for a radio 
communication system according to claim 13. Advantageous embodiments 
15 and developments of the invention are set down in dependent claims. 

The method according to the invention for operating a terminal 
device in a radio communication system provides that the terminal 
device is only authorized for operation in the radio communication 
system if a confirmation is present to the effect that the terminal 
device will be checked for proper functional integrity while it is 
operating. This allows the terminal device to be deactivated already 
prior to carrying out the actual check on the functional integrity 
of the terminal device. For if it is not possible to guarantee a 
subsequent check of the functional integrity, it is not possible to 
decide whether the terminal device is functioning correctly or not. 
Since unrecognized defects in the terminal device can have extremely 
disadvantageous effects on the radio communication system, its 
operation is actually prevented where it is determined that the 
intended check can not be properly carried out . 

Advantageously, the method according to the invention is implemented 
immediately during or shortly after commissioning of the terminal 
device in the communication system. By this means, a negative 
3 5 influence on the radio communication system in the case of a defect 
in the terminal device is prevented as early as possible. It is 
however alternatively possible to implement the method according to 
the invention for the first time while the terminal device is 
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actually in operation or also to implement the method repeatedly, 
periodically for example. In either case the method according to the 
invention has the advantage that negative influences of a defective 
terminal device on the communication in a radio communication system 
are not prevented only at the time when a corresponding check of the 
functional integrity of the terminal device has been performed. This 
can rather happen as soon as it has been determined that the desired 
checking of the functional integrity can not be guaranteed. This can 
be the case for example when a functional problem in the 
communication system or in the units provided for the checking 
renders proper checking impossible. 1 However, this can also be the 
case for example when insufficient resources are available at the 
current point in time in order to implement the check. 

In accordance with a development of the invention, a confirmation 
signal is provided which, in the event of its being transferred to 
the terminal device, specifies that the terminal device will be 
checked while it is operating. With regard to this development, the 
terminal device is authorized for operation in the communication 
system by the confirmation signal being sent to the terminal device. 
In this manner it is possible to advantageously achieve the 
situation whereby operation of the terminal device is prevented 
automatically if the confirmation signal is not transferred. 

In accordance with a development of the invention, prior to its 
authorization for operation in the communication system the terminal 
device sends a request signal to a confirmation unit, whereupon the 
confirmation unit initiates the checking of the terminal device and 
sends the confirmation signal to the terminal device. The radio 
communication system learns of the existence of the terminal device 
from the request signal and can make available the resources 
required for checking the functional integrity of the terminal 
device, which is signaled by the confirmation signal sent by the 
confirmation unit. 

For sending the request signal to the confirmation unit the terminal 
device advantageously uses an address stored previously in the 
terminal device, which address is predefined for use by a plurality 
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of terminal devices at least in this communication system. This 
makes it possible for the request signal from the terminal device to 
also actually reach the confirmation unit. In this situation the 
address of the confirmation unit used for this purpose may have been 

r 5 stored in the terminal device either during the actual manufacture 

of the terminal device or alternatively during a subsequent 

y configuration of the terminal device by means of a software 

download. However, it is also possible for the address to have been 
notified to the terminal device by means of a broadcast signal from 
10 the respective radio communication system. In both the formerly 
mentioned cases it is advantageous if the address of the 
confirmation unit is suitable for use in more than one radio 
communication system. If the terminal device is then able to 
initiate a communication in this plurality of communication systems, 
15 it can request an authorization by way of its request signal for its 
operation in the communication system already at the time of its 
commissioning by transmitting the same address in each case without 
additional knowledge of details of the respective communication 
system. 

20 

In accordance with an advantageous development of the invention, the 
terminal device only sends the request signal after a predefined 
period of time has elapsed following a registration performed by the 
terminal device with the communication network, during which period 

25 of time it has not already automatically received the confirmation 

signal. In this case registration is understood to be a procedure in 
which the terminal device provides the communication system with a 
: knowledge of its existence. The communication system is then able to 

confirm automatically to the terminal device the check on the 

3 0 functional integrity of the terminal device that is to be performed 
subsequently without the request signal needing to have been 
transmitted previously. Such a procedure is possible particularly in 
radio communication systems which are operated by a system operator 
that is responsible for the necessary checking. System operators of 

35 this type exist in the conventional mobile radio systems such as GSM 
for example and in the planned UMTS . There are however no system 
operators in the radio communication systems with decentralized 
organization such as WLAN for example or so-called self -organizing 
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systems or ad hoc systems such as Bluetooth for example. If the 
terminal device is situated in one of the latterly mentioned 
systems, it will not be able to receive an automatic confirmation 
signal because of the lack of a central entity which could initiate 

r 5 the necessary check. After the aforementioned period of time has 

elapsed, such a confirmation signal is no longer expected to arrive 

y (the terminal device can thereupon conclude that it is located in a 

communication system with no system operator) , with the result that 
the terminal device then sends out its request signal. The latter 
10 can, through use of the relevant address of the confirmation unit, 
also advantageously be forwarded in a network with a decentralized 
organization specifically to an appropriate service provider that 
initiates the desired check and sends the confirmation signal to the 
terminal device. 

15 

In accordance with a development of the invention, a plurality of 
devices are capable of performing checking of the terminal device 
for proper functional integrity while it is operating. 
Advantageously, prior to performing the check the method determines 

2 0 which of these devices is performing the checking of the terminal 

device. It is then possible to flexibly assign the resources of the 
available devices which basically come into consideration for the 
check, also in the case of a large number of terminal devices for 
which the described check is to be performed, to the terminal 

25 devices. 



Determining which device performs the check is advantageously 
carried out in such a way that the device is located in closest 
possible proximity to the terminal device. This achieves the result 
3 0 that signals to be transferred during checking between the terminal 
device and the device used for performing the check have only 
relatively short paths to travel, which means that minimal loading 
is imposed in total on the capacities of the communication system by 
these additional signals. 



Alternatively, the terminal device itself can be defined as the 
device for performing the check, with software needed for performing 
the check being delivered to the terminal device by way of an air 
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interface. With regard to this embodiment of the invention, the 
signals produced by the terminal device are actually checked by the 
terminal device itself prior to their transmission over the air 
interface. By means of a software download over the air interface, 

*■ 5 the program can be continuously updated for performing the check and 

can be adapted to the relevant communication system in which the 

V terminal device is currently located. The aforementioned program can 

even be selected depending on a current location of the terminal 
device in the communication system. 

10 

In accordance with a development of the invention, during checking 
of the terminal device, signals to be transferred by the latter are 
checked for compliance with at least one particular quality 
criterion whose value is dependent on where the terminal device is 

15 situated within the radio communication system. Certain maximum 
permissible delay times or maximum permissible transmit power 
values, for example, come into consideration as the quality 
criterion. As a result of the aforementioned location-dependent 
differing implementation of the checking of the terminal device, it 

2 0 is possible to advantageously take into consideration the fact that 
varying degrees of compliance with quality criteria can perfectly 
well be necessary in one and the same communication system. For 
example, in areas of a communication system in which a high traffic 
density is normally the case the requirements concerning the signal 

25 quality to be observed or concerning the freedom from errors of the 
terminal device in question are more demanding than in areas where a 
low traffic density is normally the case. In the first-mentioned 
case the influence of strong noise signals is made more serious by a 
possibly defective terminal device than in the last-mentioned case. 

30 

In accordance with a further development of the invention, after 
authorization of the terminal device for operation, the further 
operation of the terminal device in the communication system is then 
only subsequently refused if the check on the terminal device for 
35 proper functional integrity during operation has yielded a certain 
number of errors or an error which exceeds a particular threshold 
value. This procedure makes it possible to authorize further 
operation of the terminal device in the situation where although 
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errors are detected they can however still be tolerated with regard 
to operation of the overall communication system. Only when the 
number of errors or the severity of the error can no longer be 
tolerated with regard to operation of the communication system will 
5 the terminal device be excluded from further operation. 



* The radio communication system according to the invention, the 

terminal device for a radio communication system and also the 
confirmation unit for a radio communication system according to the 
10 dependent claims comprise the components required for the described 
method and are designed for implementing the method in an 
appropriate manner. 

The invention will be described in detail in the following with 
15 reference to exemplary embodiments represented in the figures, in 
which: 



Figure 1 shows a part of a radio communication system according to 
the invention, 

20 Figure 2 shows a schematic representation of the sequence of the 
method according to the invention for the radio 
communication system shown in Figure 1, 
Figure 3 shows a flowchart for implementing a check on a terminal 
device within the communication system shown in Figure 1, 
25 and 

Figure 4 shows the terminal device from the radio communication 
system shown in Figure 1. 



Figure 1 shows a part of a radio communication system WLAN; GSM. In 
3 0 this radio communication system is situated a terminal device MS 

taking the form of a mobile user station which can be configured by 
way of an air interface by transferring corresponding software such 
that it can be operated in communication systems based on different 
standards. The communication system can be either a centrally 
35 organized system for which a system operator is present, as is the 
case for example with the GSM system. The communication system WLAN 
can however also be a non-centrally organized system for which no 
system or network operator is present, as is the case for example 
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with ad hoc networks. The terminal device MS considered here can be 
operated in both types of radio systems. 



The communication system WLAN; GSM has a network access station AP; 
5 BS which in the case of the ad hoc network WLAN is normally referred 
to as access point AP and in the case of a GSM network as base 
V station BS . The network access station AP; BS is connected to a 

confirmation unit CU whose function is described in further detail 
in the following. The confirmation unit CU comprises a plurality of 

10 geographically separated components SC, SP, SP' . One of these 

components is a checking center SC. In addition, the confirmation 
unit CU has two checking devices SP, SP 1 . The checking center serves 
to select one of the checking devices in order to implement a check 
on the terminal device for proper functional integrity. The checking 

15 devices SP, SP' serve to implement a corresponding check on the 

terminal device MS, provided they have previously been designated 
for this purpose by the checking center SC. The units SC, SP, SP' 
within the confirmation unit CU can be made available by one or more 
different service providers in each case. If the radio communication 

20 system shown in Figure 1 is a GSM network, the components SC, SP, 
SP' of the confirmation unit CU are preferably components of the 
radio communication system. If the communication system is an ad hoc 
network or another system without a system operator, at least the 
checking center SC and preferably also the checking devices SP, SP' 

25 are made available through special service providers which the 

terminal device MS can access by way of the communication system 
WLAN. 



The checking center SC in Figure 1 can also determine that the 
30 terminal device MS will check its own functional integrity. To this 
end the checking center SC sends appropriate checking software SW by 
way of the network access station AP; BS over the air interface to 
the terminal device MS. The software SW then enables the self- 
initiating checking of the terminal device MS. 

35 

The functional integrity of the radio communication system WLAN; GSM 
shown in Figure 1 is described with reference to Figure 2. In this 
situation the individual method steps are consecutively numbered 
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with the digits 1 to 10 in Figure 2, to which reference is made in 
the following. Figure 2 shows from left to right method steps which 
are executed by the different components of the radio communication 
network WLAN; GSM shown in Figure 1. From left to right in Figure 2 
5 these components are the terminal device MS, the network access 

station AP; BS, one of the checking devices SP and also the checking 
v center SC. In a first step, a reconfiguration of the terminal device 

MS is initiated. In a second step, the terminal device MS initially 
waits for a time period t to determine whether it receives a 

10 confirmation signal from the radio communication system WLAN; GSM 
indicating that the terminal device will be checked for proper 
functional integrity while it is operating. Such a confirmation 
signal, which is denoted by S2 in Figure 1, is however only 
generated automatically by the communication system if this is one 

15 having a system operator, in other words the GSM network GSM in the 
present case. In such a case, the third step described in the 
following would be skipped and the method continued immediately with 
the fourth step. In Figure 2 it has been assumed however that the 
terminal device MS is currently situated in the ad hoc network WLAN. 

2 0 Since in this case there is no central system operator, during the 

time period t the terminal device MS does not receive a confirmation 
signal S2 from the network access station AP; BS of the radio 
communication system. In a third step after the time period t has 
elapsed, the terminal device MS therefore sends a request signal to 

2 5 the checking center SC. The request signal SI which the terminal 

device MS sends to the network access station AP; BS is shown in 
Figure 1. From there it passes to the checking center SC, whereby 
the terminal device MS uses an address ADR of the checking center 
SC, which address has previously been stored in the terminal device 

3 0 MS. In response to the request signal SI, checking center SC 

determines in a fourth step that the checking device SP is to 
perform checking of the terminal device MS for proper functional 
integrity. The checking center SC selects the particular checking 
device SP which is situated closest to the network access station 
35 AP; BS or to the terminal device MS. 



In a fifth step, the checking devices SP selected by the checking 
center SC sends a confirmation signal to the network access station 
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AP; BS which in a sixth step passes on the confirmation signal S2 
(cf. Figure 1) to the terminal device MS. After receiving the 
confirmation signal S2, the terminal device MS continues its 
operation. 

5 

If the terminal device MS were not to receive a confirmation signal 
S2 that would amount to the same thing as there having been no 
authorization for operation issued to the terminal device and the 
terminal device MS would deactivate itself. 

10 

In a seventh step, the air interface A between the terminal device 
MS and the network access station AP; BS is checked by the checking 
device SP in respect of correct signals of the terminal device MS. 
If errored behavior of the terminal device MS is subsequently 
15 detected in an eighth step by the checking device SP, this is 
notified to the network access station AP; BS in a ninth step, 
whereupon a reconfiguration of the terminal device by means of a 
software download takes place in a tenth step in order to recover 
the error. The ten steps described can then be executed again. 

20 

Figure 4 shows the terminal device MS from Figure 1. In addition to 
a transmit device MSTX and a receive device MSRX for transmitting 
and receiving signals, the terminal device MS comprises a processor 
MSP for controlling its functions. Furthermore, it has a timer T for 

25 measuring the time period t as per the second step from Figure 2. 
Furthermore, the terminal device MS contains a memory in which the 
address ADR of the confirmation unit CU or of its checking center SC 
is stored. In addition, a deactivation unit DA is present which 
effects the described deactivation of the terminal device MS when 

30 either no confirmation signal S2 is received by way of the receive 
device MSRX or a special deactivation signal is received which is 
the case in the event of an error in the functional integrity of the 
terminal device MS detected by checking duration operation. 

35 The checking devices SP, SP' and also the checking center SC in 

Figure 1 have receive devices and transmit devices for receiving and 
transmitting the corresponding signals, and also have a processor in 
each case which is used for controlling them. 
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According to Figure 3, during commissioning of the terminal device 
MS from Figure 1 the method for generating the confirmation signal 
S2, as described according to Figure 2, is first initiated (block 
5 100) . In block 100a a check is performed to determine whether the 
confirmation signal S2 has been sent to the mobile station MS. If 
this is not the case, the terminal device MS automatically 
deactivates itself (block 100b) . If this is the case, however, the 
check of the functional integrity of the terminal device MS is 

10 performed while it is operating (block 101) . In the event of an 
error occurring, is check is first made to determine whether the 
error is recoverable (block 102) . The reason why the terminal device 
MS is not also deactivated immediately in the event of an 
unrecoverable error consists in the fact that the requirements 

15 relating to freedom from errors of operation of the terminal device 
MS can change as a result of a possible movement of the terminal 
device MS in the radio communication system at a later point in time 
(for example on leaving the current cell of a cellular mobile radio 
system and entering a new cell) . 

20 

If the error is recoverable, the error is recovered by means of 
appropriate instructions from the checking device SP to the terminal 
device MS (block 103) . This is done by placing the terminal device 
MS in a corresponding operating state. If the detected error is not 

25 recoverable, however, the existing connection of the terminal device 
MS, over which the signals S are sent in Figure 1, is interrupted 
(block 104) . A comparison of the current check results from the 
checking device SP with older measurement results which the checking 
device SP has already determined previously for the same terminal 

30 device MS is then performed (block 105) . In this situation, an 

investigation is carried out as to whether multiple instances of the 
same error have already occurred and whether in this case a 
previously defined number of the same error has already been 
exceeded. Alternatively, instead of the comparison with errors which 

35 have already occurred previously it is also possible to check the 

severity of the error (block 106) . The number of permissible errors 
or the severity of the error which can still just be tolerated 
depends on where the terminal device MS is currently situated within 
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the communication system WLAN; GSM. The current position can be 
ascertained for example by way of an appropriate Location Service 
Provider or by utilizing Mobility Management information. If the 
terminal device MS is located for example in a private environment 
(the user's apartment) or in an environment with a generally low 
traffic volume, the requirements concerning the freedom from errors 
for operation of the terminal device MS can be less demanding than 
in areas with high demands on the reliability of operation or having 
a high traffic volume. 

If this interrogation determines that the predefined number of 
errors has not been exceeded or that the severity of the error still 
lies within the tolerable range, the terminal device MS remains 
authorized for further operation and is placed in a standby mode 
(block 107) . However, if the specified error count has been exceeded 
or if the severity of the error is not longer tolerable, the 
terminal device MS is deactivated by means of an appropriate signal 
from the checking device SP (block 108) . 

In order to determine errors which occur during operation of the 
terminal device MS, the checking device SP can check the signals S 
sent out by the terminal device MS for compliance with protocols 
which are defined by the standard applying to the respective 
communication system WLAN; GSM. 

The checking center SP shown in Figure 1 also has the capability to 
define the terminal device MS itself for performing the check for 
proper functional integrity instead of the checking device SP, SP'. 
For this purpose, the checking center SC can download appropriate 
checking software SW by way of the network access station AP; BS to 
the terminal device MS. The terminal device MS then utilizes this 
checking software SW in order to perform its own checking. 

The address ADR of the checking center SC used for transmitting the 
request signal SI is advantageously valid for all possible 
communication systems in which the terminal device MS can be 
operated (for example, after it has been made fit for use by means 
of appropriate software downloads for such types of systems in each 
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case) . The address ADR can for example be a particular telephone 
number valid for all communication networks. Such an address ADR 
would then be comparable with the emergency telephone numbers 
commonplace today which are standardized in a great diversity of 
5 mobile radio systems. In Germany, for example, this emergency number 
is "112". 

i. 

The invention is suitable for use in any desired terminal devices MS 
which can be reconfigured by means of software downloads. It is 
10 suitable for use in any desired radio communication networks in 
which such types of reconf igurable terminal devices can be used. 

It is also possible that instead of only one checking device SP a 
plurality of checking devices SP, SP' and also possibly the terminal 

15 device itself MS simultaneously perform checking of the functional 
integrity of the terminal device MS while it is operating. This is 
likewise defined by the checking center SC. In this situation, any 
of the units involved in such a check can monitor or check certain 
parameters or protocol messages of the terminal device MS assigned 

2 0 to it by the checking center SC. 

Apart from being performed under the aspect of minimizing the data 
traffic in the overall communication network, the selection of the 
checking device SP performing the check by the checking center SC 
25 can also be performed under the aspect of distributing the compute- 
intensive checking measures evenly between the available checking 
devices SP, SP' . 



